Lumen CEO: AI bots already generate more than half of all internet traffic worldwide

Lumen CEO Kate Johnson warned that AI bots already create more than half of global internet traffic. For businesses, this is no longer curious statistics but a signal: automated agents simultaneously speed up services and expand the attack surface.

Why traffic is changing

The internet was long built around human action: opening a page, sending an email, clicking a button, uploading a file. Now more and more requests are created not by people but by software agents — from support systems and search crawlers to internal assistants that themselves search for data, check statuses, and perform routine actions. If the share of such traffic already exceeds half, as Lumen's CEO says, it means corporate networks and public services increasingly interact in machine-to-machine mode rather than user-to-server.

This changes the very profile of network load. Bots work faster than people, more often repeat the same operations, and can access services around the clock without breaks. Because of this, familiar filtering rules, request limits, and monitoring methods begin to poorly reflect the real picture.

What once seemed like a spike in suspicious activity can now turn out to be legitimate automation. But the opposite is also true: behind seemingly normal bot traffic, it becomes easier to hide unwanted scanning, vulnerability probing, or unnoticed data exfiltration.

Where the risk is for business

The problem for companies is not the fact of growing bots itself, but that beneficial and malicious agents use the same infrastructure. Networks, contact centers, website forms, APIs, and analytics face a stream of requests where it's increasingly difficult to determine intent by external signs. In this environment, businesses must reconsider not only perimeter protection, but also how customer scenarios, billing, data access, and request prioritization are structured.

• Support services receive more and more automatic requests and must distinguish real customers from bot agents.
• Security teams see more background traffic, within which it's easier to hide scanners, parsers, and attacks.
• Infrastructure costs grow if bot requests burden APIs, CDNs, databases, and external integrations.
• Product analytics and marketing receive distorted metrics if some "users" are actually agents.

Hence the shift in management logic: it's no longer enough to simply keep a website accessible and respond quickly to tickets. It's necessary to understand who exactly is accessing the system, at what speed, with what behavior pattern, and to what data. For some companies, this means implementing stricter customer and bot identification, for others — reviewing rate limits, bot protection, network segmentation, and access rules for internal services.

What companies will change

The Lumen statement is important because it comes not from a chatbot developer but from a major network player looking at infrastructure at scale. If most traffic is already generated by machines, businesses will have to design services with the constant presence of agents in mind. This applies to both external products and internal operations: from customer support to monitoring suppliers, financial systems, and corporate assistants.

In practice, companies will invest in behavioral traffic analysis, separate policies for humans and machines, API protection, and more precise telemetry. A separate question is trusted partner bots and proprietary AI agents: they need controlled access, clear limits, and activity logging. Otherwise, automation that was supposed to accelerate processes will itself create bottlenecks, false positives, and new channels for leaks.

What this means

The internet is rapidly becoming an environment where machines serve, verify, and attack other machines. For business, those who will win are not those who simply add another AI bot, but those who learn to see all automatic traffic as a whole and manage it as a separate layer of digital infrastructure.